Vulnerability in SSH Secure Shell For Servers

CVE-2002-1646

SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.

EPSS: 0.036 (88.4th percentile) — read the EPSS interpretation.

Affected products

Ssh Secure_shell_for_servers — versions 3.0, 3.0.1, 3.1
N/a — versions n/a

References

cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch)